FactoryTalk Historian Site Edition (SE)Ĥ.2 VULNERABILITY OVERVIEW 4.2.1 IMPROPER NEUTRALIZATION OF INPUT DURING WEB PAGE GENERATION ('CROSS-SITE SCRIPTING') CWE-79Ī Cross-Site Scripting (“XSS”) vulnerability was found in certain versions of Wibu-Systems CodeMeter that may allow local attackers to inject arbitrary web script or HTML via a specific field in a configuration file, allowing an attacker to access sensitive information, or even rewrite the content of the HTML page.ĬVE-2017-13754 has been assigned to this vulnerability.Users who recognize products from the following list are using FactoryTalk Activation Manager:
#FACTORYTALK ACTIVATION KEYGEN SOFTWARE#
The following products require FactoryTalk Activation Manager to store and keep track of Rockwell Automation software products and activation files.
#FACTORYTALK ACTIVATION KEYGEN CODE#
Successful exploitation of these vulnerabilities could allow a remote attacker to access sensitive information, rewrite content, or cause a buffer overflow that could result in remote code execution. This updated advisory is a follow-up to the updated advisory titled ICSA-18-102-02 Rockwell Automation FactoryTalk Activation Manager (Update A) that was published May 24, 2018, on the NCCIC/ICS-CERT website. Vulnerabilities: Cross-site Scripting, Improper Restriction of Operations within the Bounds of a Memory Buffer.Equipment: Factory Talk Activation Manager.ATTENTION: Exploitable remotely/low skill level to exploit.
0 kommentar(er)
